Senior Product Security Engineer

Overview

Join Snyk as a Senior Product Security Engineer on our Product Security team, focused on consulting closely with engineering teams responsible for our cloud platform infrastructure. This role involves leveraging deep knowledge of GCP and AWS to translate threat models into effective infrastructure fixes, collaborating directly with platform teams to implement security enhancements through automation and AI-driven tooling.

Responsibilities

• Analyze and threat model cloud infrastructures on both GCP and AWS to determine essential security requirements.
• Collaborate with infrastructure ownership teams to negotiate and implement identified security changes.
• Employ AI-driven coding assistants (e.g., Claude Code) to draft Terraform, Kubernetes, and pipeline modifications that address security issues and facilitate their merging.
• Operate large-scale AI agent fixes across multiple code repositories, carefully scoping changes for owner approval.
• Create and maintain instructional content and security baselines that guide AI agent outputs to meet Snyk’s standards consistently.
• Integrate AI agents with live cloud data sources, CSPM tools, ticketing systems, and provider APIs to ground automated fixes in real environment context.
• Critically evaluate AI-generated infrastructure changes to detect fabricated resources, unsafe defaults, and excessive IAM permissions.
• Enhance security configurations for GCP IAM structures including the resource hierarchy, roles, service accounts, workload identity federation, and organization policies; similarly for AWS IAM.
• Strengthen Kubernetes and container security especially for GKE clusters through hardening techniques such as private clusters, Autopilot, RBAC, admission controls, network policies, workload identities, and secure image pipelines.
• Embed automated security scans and CSPM tools into CI/CD and GitOps pipelines and support teams in triaging findings.
• Benchmark infrastructure configurations against established standards like CIS Google Cloud Foundation Benchmark, ISO 27001, and NIST 800-53 controls.
• Mitigate risks introduced by AI agents including prompt injections, broad permission grants, leaked secrets, and unreviewed changes.
• Measure effectiveness of AI-driven fixes across teams and iterate on methods to improve security outcomes and adoption.

Requirements

• 5 to 8 years of experience operating or securing cloud infrastructure platforms, with prior production experience in GCP or AWS.
• Expert-level knowledge of GCP's security features and confident working familiarity with AWS security services; deep AWS IAM knowledge is advantageous.
• Proficient understanding of GCP Identity and Access Management, covering resource organization, role and condition assignment, service accounts, workload identity federation, and organizational policies with an emphasis on least privilege.
• Hands-on experience with Kubernetes and container security mainly on GKE including cluster hardening, RBAC, admission control, network policies, and container image security; EKS experience desirable.
• Competence in infrastructure-as-code tools (e.g., Terraform) and familiarity with automated deployment practices involving CI/CD and GitOps.
• Strong background in DevSecOps best practices including threat modeling, shift-left security testing, continuous monitoring, and converting insights into tangible infrastructure adjustments.
• Fluency using AI coding agents in daily workflows, coupled with the ability to author guidance and prompts to ensure consistent agent performance.
• Analytical skill to review AI-generated infrastructure for inaccuracies, insecure defaults, and over-privileged permissions prior to deployment.
• Effective consultative communication style, capable of influencing infrastructure-owning teams to adopt security improvements collaboratively.
• Bonus: Knowledge of application security principles such as code review and OWASP Top 10, or familiarity with Snyk’s security tools.

Additional Information

Snyk is dedicated to fostering an inclusive environment where employees can excel and share a unified mission of making the digital landscape safer. We support our workforce through diverse employee resource groups and comprehensive global benefits addressing wellness, financial health, and work-life balance.

Equal Opportunity Employer: Snyk provides employment consideration without discrimination based on race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, or veteran status.

Compensation Range: USD 192000 - 240000 annually.